DEBIAN-CVE-2025-32898

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2025-32898
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2025-32898
Upstream
  • CVE-2025-32898
Published
2025-12-05T05:16:58.480Z
Modified
2025-12-06T05:12:59.221517Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

References

Affected packages

Debian:11
kdeconnect

Package

Name
kdeconnect
Purl
pkg:deb/debian/kdeconnect?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

20.*
20.12.3-2
21.*
21.04.0-1
21.08.0-1
21.08.2-1
21.08.3-1
21.12.3-1
21.12.3-2
22.*
22.12.0-1
22.12.0-2
22.12.1-1
22.12.2-1
22.12.3-1
23.*
23.08.2-1
23.08.5-1
24.*
24.08.2-1
24.08.3-1
24.08.3-2
24.12.0-1
25.*
25.04.0-1
25.04.0+git20250504.28fb9142-1
25.04.2-1
25.08.1-1
25.11.80+git20251121.7090b106-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"
Debian:12
gnome-shell-extension-gsconnect

Package

Name
gnome-shell-extension-gsconnect
Purl
pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

Other
54-2
55-1
55-2
55-3
55-4
56-1
57-1
57-2
57-3
58-1
58-2
58-3
62-1
67-1
67-2
71-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"
kdeconnect

Package

Name
kdeconnect
Purl
pkg:deb/debian/kdeconnect?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

22.*
22.12.3-1
23.*
23.08.2-1
23.08.5-1
24.*
24.08.2-1
24.08.3-1
24.08.3-2
24.12.0-1
25.*
25.04.0-1
25.04.0+git20250504.28fb9142-1
25.04.2-1
25.08.1-1
25.11.80+git20251121.7090b106-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"
Debian:13
gnome-shell-extension-gsconnect

Package

Name
gnome-shell-extension-gsconnect
Purl
pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
62-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"
kdeconnect

Package

Name
kdeconnect
Purl
pkg:deb/debian/kdeconnect?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
25.04.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"
Debian:14
gnome-shell-extension-gsconnect

Package

Name
gnome-shell-extension-gsconnect
Purl
pkg:deb/debian/gnome-shell-extension-gsconnect?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
62-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"
kdeconnect

Package

Name
kdeconnect
Purl
pkg:deb/debian/kdeconnect?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
25.04.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-32898.json"